2e4d03c00594fac43ee646913abd0883_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e4d03c00594fac43ee646913abd0883_JaffaCakes118
Size

420KB
MD5

2e4d03c00594fac43ee646913abd0883
SHA1

d38f967dcf645fb9a51aafcb57001ebb06fae76f
SHA256

b0caa3e5cad57e72ffb8d422668489653a4aa2d557805aae35ff0456e0a3defe
SHA512

cb3188a8151e26dd4ac6b6ae334a2a4842683123f517d40ed20543e880245eb6562407241e3d94c9da4909fbe733e6b4a8c11813f3e1d49579b4084792a48985
SSDEEP

6144:z6vrHo1Rev5BFei7nbkb5AzW4LmmPSsT10jvp1n92JSFuDFKzSX3wltJ:KrHovev5BV7VWUasTYT92rDgSX3Wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e4d03c00594fac43ee646913abd0883_JaffaCakes118

Files

2e4d03c00594fac43ee646913abd0883_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ